Privacy Policy

Blue Cactus Design Factory (hereinafter referred to as “Company”, “We”, or “Us”) acts as the Data Controller for the processing of your personal data through our website (www.bluecactusdf.com). We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR), the Spanish Organic Law on Data Protection and Guarantee of Digital Rights (LOPDGDD), and the Turkish Law on the Protection of Personal Data (KVKK).

1. DATA CONTROLLER INFORMATION

Company Name: Blue Cactus Design Factory

Address: Carrer de la Diputació 249, 3-4, 08007 Barcelona, Spain

Email: info@bluecactusdf.com

Phone: +34 610 360786

2. PERSONAL DATA WE COLLECT

We collect information that you voluntarily provide to us through our contact forms, job application forms, and through automated technologies:

Identity & Contact Data: Name, surname, email address, phone number.
Professional Data (for Applicants): CV, portfolio, educational background, and employment history.
Technical Data: IP address, browser type, and usage data collected via cookies.

3. PURPOSES AND LEGAL BASIS FOR PROCESSING

Your data is processed based on the following legal grounds:

PurposeLegal Basis (GDPR Art. 6 / KVKK Art. 5)

Responding to Inquiries: To provide information or quotes regarding our architectural services.Performance of a Contract or pre-contractual steps.

Recruitment: To evaluate job applications and portfolios.Legitimate Interest of the Company or Explicit Consent.

Marketing: Sending newsletters or updates about our projects.Explicit Consent (Opt-in).

Legal Compliance: To comply with legal obligations and official requests.Legal Obligation.

4. DATA TRANSFER AND INTERNATIONAL STORAGE

Internal Access: Your data may be shared between our departments to fulfill your request.
Third-Party Providers: We use secure cloud service providers (e.g., Google Workspace, Microsoft) whose servers may be located outside of your country of residence.
Cross-Border Transfer: Since our headquarters is in Barcelona, Spain, data collected from users in Turkey or other non-EU countries will be transferred to Spain. We ensure that such transfers comply with the necessary "Standard Contractual Clauses" or adequacy decisions required by KVKK and GDPR.

5. DATA RETENTION

Your personal data will be stored only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal, regulatory, or internal policy requirements. Job applications are kept for a maximum of 2 years unless otherwise agreed.

6. YOUR RIGHTS

Under GDPR and KVKK, you have the right to:

Access: Request a copy of the data we hold about you.
Rectification: Request correction of inaccurate data.
Erasure (Right to be Forgotten): Request deletion of your data.
Restriction/Objection: Object to processing for marketing or legitimate interests.
Data Portability: Request transfer of your data to another controller.

To exercise these rights, please contact us at info@bluecactusdf.com.